WS-2017-0130 | Mend Vulnerability Database

Vulnerability DatabaseWS-2017-0130

WS-2017-0130

Published:May 14, 2026

Updated:May 14, 2026

Affected versions of the knockout package are vulnerable to Cross-site Scripting (XSS).

Affected Packages

knockout (CDN_JS):

Affected version(s) >=2.2.0 <3.0.0

Fix Suggestion:

Update to version 3.0.0

seqan-library (CONDA):

Affected version(s) =2.4.0

Fix Suggestion:

Update to version no_fix

seqan (CONDA):

Affected version(s) >=2.1.1 <=2.4.0

Fix Suggestion:

Update to version no_fix

knockout (NPM):

Affected version(s) >=2.1.0-pre <3.0.0

Fix Suggestion:

Update to version 3.0.0

hpoc (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

cucumberjs-specrunner (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

umbracocms (NUGET):

Affected version(s) >=6.1.0-beta <6.1.2

Fix Suggestion:

Update to version 6.1.2

webproject (NUGET):

Affected version(s) >=1.0.0 <=1.5.0

Fix Suggestion:

Update to version no_fix

sefdataservice (NUGET):

Affected version(s) =1.1.0.1

Fix Suggestion:

Update to version no_fix

lind.ddd.manager (NUGET):

Affected version(s) >=1.0.0 <=2.1.1

Fix Suggestion:

Update to version no_fix

ap.web (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

caregiverpoc (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

openwaves.episerver.tagsproperty (NUGET):

Affected version(s) >=1.0.87.225 <=2.0.87.818

Fix Suggestion:

Update to version no_fix

knockoutjs (NUGET):

Affected version(s) >=2.2.1 <3.0.0

Fix Suggestion:

Update to version 3.0.0

sp.orchard (NUGET):

Affected version(s) =1.7.1

Fix Suggestion:

Update to version no_fix

newhottowel (NUGET):

Affected version(s) >=1.0.0 <=4.0.0

Fix Suggestion:

Update to version no_fix

lind.ddd.newmanager (NUGET):

Affected version(s) >=1.0.0 <=1.0.3

Fix Suggestion:

Update to version no_fix

saltarelle.knockout (NUGET):

Affected version(s) >=1.4.0 <1.6.3

Fix Suggestion:

Update to version 1.6.3

bizagimodelertest (NUGET):

Affected version(s) =3.3.1.118

Fix Suggestion:

Update to version no_fix

sfs-shell-web-mvc-compiled (NUGET):

Affected version(s) =1.0.0 <1.0.0.51

Fix Suggestion:

Update to version 1.0.0.51

jqwidgets_framework (NUGET):

Affected version(s) >=6.1.0 <8.0.0

Fix Suggestion:

Update to version 8.0.0

mvcmusicstore (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

easyfurion (NUGET):

Affected version(s) >=1.0.0 <=1.0.1

Fix Suggestion:

Update to version no_fix

umbracocms (NUGET):

Affected version(s) >=6.0.0-rc <6.0.7

Fix Suggestion:

Update to version 6.0.7

mvcforum (NUGET):

Affected version(s) >=0.8.5.1 <=1.5.1.18

Fix Suggestion:

Update to version no_fix

breeze.mvc4webapiclientsample (NUGET):

Affected version(s) >=0.73.1 <=0.84.4

Fix Suggestion:

Update to version no_fix

xsockets.sample.stockticker (NUGET):

Affected version(s) >=0.1.0 <=0.5.8

Fix Suggestion:

Update to version no_fix

project.commonbackground (NUGET):

Affected version(s) >=1.0.2 <=1.0.5

Fix Suggestion:

Update to version no_fix

breeze.webapisample (NUGET):

Affected version(s) >=0.85.1 <1.1.3

Fix Suggestion:

Update to version 1.1.3

zephyr.web (NUGET):

Affected version(s) >=1.0.0 <=2.0.0.1

Fix Suggestion:

Update to version no_fix

learnhtml5 (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

knockout.mvc (NUGET):

Affected version(s) =0.5.1

Fix Suggestion:

Update to version no_fix

poc (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

caregiverdomain (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

xsockets.tutorials (NUGET):

Affected version(s) >=0.6.0 <=0.9.2

Fix Suggestion:

Update to version no_fix

mymvc4wejdemo (NUGET):

Affected version(s) =1.0.1

Fix Suggestion:

Update to version no_fix

jqwidgets_framework (NUGET):

Affected version(s) >=4.5.0 <6.0.6

Fix Suggestion:

Update to version 6.0.6

goicuavinh (NUGET):

Affected version(s) =1.0.2

Fix Suggestion:

Update to version no_fix

dcb (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

abao-mypackage (NUGET):

Affected version(s) =1.0.3

Fix Suggestion:

Update to version no_fix

maoyuanmvckendojslib (NUGET):

Affected version(s) =1.0.1

Fix Suggestion:

Update to version no_fix

octopus (NUGET):

Affected version(s) =1.0.0.1

Fix Suggestion:

Update to version no_fix

bizagimodeler (NUGET):

Affected version(s) >=3.3.1.203 <=3.3.1.205-b

Fix Suggestion:

Update to version no_fix

composite.windowsazure.management (NUGET):

Affected version(s) =1.0.0-alpha1310230159

Fix Suggestion:

Update to version no_fix

efficentdurandalframework (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

knockoutjs (NUGET):

Affected version(s) =2.1.0 <2.2.0

Fix Suggestion:

Update to version 2.2.0

umbracocms (NUGET):

Affected version(s) >=4.9.0 <4.11.10

Fix Suggestion:

Update to version 4.11.10

xsockets.sample.webrtc (NUGET):

Affected version(s) >=0.1.0 <0.7.1

Fix Suggestion:

Update to version 0.7.1

umbracocms (NUGET):

Affected version(s) =6.2.6 <7.0.0-RC

Fix Suggestion:

Update to version 7.0.0-RC

proofofconcept (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

knockout-bootstrap (NUGET):

Affected version(s) =0.2.1

Fix Suggestion:

Update to version no_fix

humana (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

carsystem (NUGET):

Affected version(s) >=1.0.0 <2.0.1-alpha

Fix Suggestion:

Update to version 2.0.1-alpha

shared.test.package (NUGET):

Affected version(s) >=1.0.0 <1.0.3

Fix Suggestion:

Update to version 1.0.3

openwaves.episerver.brightcovevideocloudproperty (NUGET):

Affected version(s) >=1.0.86.606 <=1.0.88.873

Fix Suggestion:

Update to version no_fix

pscheit/psc-cms-js (PHP):

Affected version(s) >=dev-cojoko-transpile <dev-master

Fix Suggestion:

Update to version dev-master

nasermekky/fast-dashboard (PHP):

Affected version(s) =1.6.17 <1.6.18

Fix Suggestion:

Update to version 1.6.18

nasermekky/it (PHP):

Affected version(s) >=1.6.8 <=1.6.40

Fix Suggestion:

Update to version no_fix

hexmedia/knockout-bootstrap (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

pscheit/psc-cms-js (PHP):

Affected version(s) =1.2.x-dev <1.2.1

Fix Suggestion:

Update to version 1.2.1

reginaldojunior/winners (PHP):

Affected version(s) =v0.1-beta <v0.1.1-beta

Fix Suggestion:

Update to version v0.1.1-beta

nasermekky/fastdashbord (PHP):

Affected version(s) >=1.6.8 <=1.6.31

Fix Suggestion:

Update to version no_fix

pscheit/psc-cms-js (PHP):

Affected version(s) >=1.3.0 <1.5.0-alpha

Fix Suggestion:

Update to version 1.5.0-alpha

matidev/types (PHP):

Affected version(s) =2.3.5

Fix Suggestion:

Update to version no_fix

nasermekky/fastdashbord (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

nasermekky/it (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

phpanonymous/it (PHP):

Affected version(s) >=1.6.8 <=1.6.40

Fix Suggestion:

Update to version no_fix

fmccoy/a360-core (PHP):

Affected version(s) =dev-dev-master <dev-develop

Fix Suggestion:

Update to version dev-develop

pscheit/psc-cms-js (PHP):

Affected version(s) =1.1.x-dev <1.1.1

Fix Suggestion:

Update to version 1.1.1

pscheit/serien-loader-client (PHP):

Affected version(s) >=dev-master <=1.0.3-alpha

Fix Suggestion:

Update to version no_fix

mead_steve/behationary (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

dev-temp/plugins (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

matidev/matiwp-types (PHP):

Affected version(s) =2.3.5

Fix Suggestion:

Update to version no_fix

nasermekky/fast-dashboard (PHP):

Affected version(s) =1.6.13 <1.6.14

Fix Suggestion:

Update to version 1.6.14

Related Resources (2)

https://github.com/knockout/knockout/pull/1022

https://github.com/hapijs/podium/pull/17

Do you need more information?

CVSS v4

Base Score:

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

PASSIVE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE